I0702 15:21:22.296137 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0702 15:21:22.296274 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0702 15:21:22.296345 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 15:21:22.299638 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0702 15:21:22.299978 1 controller.go:156] "cert-manager/controller: starting leader election" I0702 15:21:22.300117 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0702 15:21:22.300114 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0702 15:21:22.302173 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 15:21:22.318110 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0702 15:21:22.321081 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0702 15:21:22.326312 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0702 15:21:22.328545 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0702 15:21:22.331600 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0702 15:21:22.334043 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0702 15:21:22.334149 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0702 15:21:22.336044 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0702 15:21:22.337845 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0702 15:21:22.337953 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0702 15:21:22.339649 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0702 15:21:22.346955 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0702 15:21:22.347022 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0702 15:21:22.347166 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0702 15:21:22.351076 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0702 15:21:22.353783 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0702 15:21:22.355685 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0702 15:21:22.357504 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0702 15:21:22.359163 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0702 15:21:22.359201 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0702 15:21:22.361135 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0702 15:21:22.362876 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0702 15:21:22.364503 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0702 15:21:22.364549 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0702 15:21:22.369445 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0702 15:21:36.121273 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 15:21:36.121242681 +0000 UTC m=+13.857910697 I0702 15:21:36.868999 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:21:36.869042 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 15:21:36.869030887 +0000 UTC m=+14.605698903 I0702 15:21:36.869173 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:21:36.86916879 +0000 UTC m=+14.605836776 E0702 15:21:36.883435 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:21:36.884146 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 15:21:36.883504459 +0000 UTC m=+14.620172455 E0702 15:21:36.884204 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:21:36.886712 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:21:36.886815 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:21:36.886841 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 15:21:36.886834876 +0000 UTC m=+14.623502872 E0702 15:21:36.895980 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0702 15:21:36.896209 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:21:36.896431 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:21:36.896540 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0702 15:21:36.933877 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:21:36.939199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nxpjv" condition "Approved" to 2026-07-02 15:21:36.939156942 +0000 UTC m=+14.675824948 I0702 15:21:36.955138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nxpjv" condition "Ready" to 2026-07-02 15:21:36.955121904 +0000 UTC m=+14.691789900 I0702 15:21:36.977574 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:21:36.977558797 +0000 UTC m=+14.714226793 I0702 15:21:36.996234 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:21:36.998634 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:21:36.998614171 +0000 UTC m=+14.735282197 I0702 15:21:37.013405 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:21:37.013647 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:21:37.013640023 +0000 UTC m=+14.750308019 I0702 15:21:37.017224 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:21:41.897005 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:21:41.896993296 +0000 UTC m=+19.633661282 I0702 15:22:04.355325 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 15:22:04.355309512 +0000 UTC m=+42.091977498 I0702 15:22:04.355583 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:22:04.355632 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 15:22:04.355622464 +0000 UTC m=+42.092290460 I0702 15:22:04.370639 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 15:22:04.37062952 +0000 UTC m=+42.107297526 I0702 15:22:04.383570 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:22:04.384950 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:22:04.384997 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 15:22:04.38498616 +0000 UTC m=+42.121654166 I0702 15:22:04.555126 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:22:04.564408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-654zb" condition "Approved" to 2026-07-02 15:22:04.564400844 +0000 UTC m=+42.301068820 I0702 15:22:04.599788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-654zb" condition "Ready" to 2026-07-02 15:22:04.599766609 +0000 UTC m=+42.336434605 I0702 15:22:04.627996 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:22:04.62798182 +0000 UTC m=+42.364649806 I0702 15:22:04.659369 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:22:04.723670 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:24:34.199783 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-12.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:24:34.199810 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Issuing" to 2026-07-02 15:24:34.19980421 +0000 UTC m=+191.936472186 I0702 15:24:34.199832 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready" to 2026-07-02 15:24:34.199816561 +0000 UTC m=+191.936484537 I0702 15:24:34.223150 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:24:34.223206 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready" to 2026-07-02 15:24:34.223200057 +0000 UTC m=+191.959868043 I0702 15:24:34.477219 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:24:34.504648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-12.nip.io-tls-b9xkf" condition "Approved" to 2026-07-02 15:24:34.504631769 +0000 UTC m=+192.241299765 I0702 15:24:34.530293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-12.nip.io-tls-b9xkf" condition "Ready" to 2026-07-02 15:24:34.530281517 +0000 UTC m=+192.266949513 I0702 15:24:34.562977 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:24:34.562961438 +0000 UTC m=+192.299629454 I0702 15:24:34.592808 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:25:29.991296 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:25:29.991364 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 15:25:29.991355826 +0000 UTC m=+247.728023842 I0702 15:25:29.991374 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:25:29.991349716 +0000 UTC m=+247.728017742 E0702 15:25:30.001197 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:25:30.001266 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 15:25:30.001227376 +0000 UTC m=+247.737895372 E0702 15:25:30.001297 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:25:30.003514 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:25:30.003627 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:25:30.003673 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 15:25:30.003640265 +0000 UTC m=+247.740308281 E0702 15:25:30.009835 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0702 15:25:30.010044 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:25:30.010098 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:25:30.010222 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0702 15:25:30.037810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7vcns" condition "Approved" to 2026-07-02 15:25:30.037791798 +0000 UTC m=+247.774459824 I0702 15:25:30.052566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7vcns" condition "Ready" to 2026-07-02 15:25:30.052542834 +0000 UTC m=+247.789210830 I0702 15:25:30.080950 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:25:30.080938123 +0000 UTC m=+247.817606109 I0702 15:25:30.096698 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:25:30.134156 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:25:35.010547 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:25:35.010531104 +0000 UTC m=+252.747199130 I0702 15:26:15.560070 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 15:26:15.560032878 +0000 UTC m=+293.296700864 I0702 15:26:15.560762 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:15.560781 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 15:26:15.560778334 +0000 UTC m=+293.297446320 I0702 15:26:15.564213 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:15.564232 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 15:26:15.564228887 +0000 UTC m=+293.300896873 I0702 15:26:15.564419 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 15:26:15.564414118 +0000 UTC m=+293.301082104 I0702 15:26:15.564565 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:15.564578 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 15:26:15.564575769 +0000 UTC m=+293.301243755 I0702 15:26:15.564700 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 15:26:15.56468245 +0000 UTC m=+293.301350436 I0702 15:26:15.612490 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:15.612541 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:15.612560 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 15:26:15.612555571 +0000 UTC m=+293.349223557 I0702 15:26:15.617842 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:15.619697 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:15.619757 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 15:26:15.619747 +0000 UTC m=+293.356414996 I0702 15:26:15.622427 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:15.622473 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 15:26:15.622466578 +0000 UTC m=+293.359134564 I0702 15:26:15.909035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2b2ht" condition "Approved" to 2026-07-02 15:26:15.909023724 +0000 UTC m=+293.645691720 I0702 15:26:15.935814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2b2ht" condition "Ready" to 2026-07-02 15:26:15.935787164 +0000 UTC m=+293.672455150 I0702 15:26:15.963989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tnl2v" condition "Approved" to 2026-07-02 15:26:15.963970464 +0000 UTC m=+293.700638450 I0702 15:26:15.967953 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:15.96794471 +0000 UTC m=+293.704612696 I0702 15:26:15.988093 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:15.990461 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:15.990448211 +0000 UTC m=+293.727116207 I0702 15:26:15.992689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tnl2v" condition "Ready" to 2026-07-02 15:26:15.992679966 +0000 UTC m=+293.729347962 I0702 15:26:16.041684 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:16.041665251 +0000 UTC m=+293.778333237 I0702 15:26:16.070472 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0702 15:26:16.152804 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"grafana-tls-jds57\" already exists" key="monitoring/grafana-tls" E0702 15:26:16.153209 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"prometheus-tls-npxnb\" not found" key="monitoring/prometheus-tls" I0702 15:26:16.255553 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:16.352813 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:16.506598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5zk24" condition "Approved" to 2026-07-02 15:26:16.506585376 +0000 UTC m=+294.243253372 I0702 15:26:16.610507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5zk24" condition "Ready" to 2026-07-02 15:26:16.610492279 +0000 UTC m=+294.347160275 I0702 15:26:17.079965 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:17.07995261 +0000 UTC m=+294.816620606 I0702 15:26:17.152601 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:17.153397 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:17.153385236 +0000 UTC m=+294.890053262 I0702 15:26:17.403406 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:17.453755 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:24.219311 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:24.219378 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" condition "Issuing" to 2026-07-02 15:26:24.219369952 +0000 UTC m=+301.956037948 I0702 15:26:24.219813 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" condition "Ready" to 2026-07-02 15:26:24.219802717 +0000 UTC m=+301.956470713 I0702 15:26:24.237898 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:24.238042 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:24.238096 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" condition "Issuing" to 2026-07-02 15:26:24.238087658 +0000 UTC m=+301.974755654 I0702 15:26:24.456445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2v5r4-2k7tz" condition "Approved" to 2026-07-02 15:26:24.456431135 +0000 UTC m=+302.193099121 I0702 15:26:24.472935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2v5r4-2k7tz" condition "Ready" to 2026-07-02 15:26:24.472920078 +0000 UTC m=+302.209588064 I0702 15:26:24.559210 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:24.559194002 +0000 UTC m=+302.295861988 I0702 15:26:24.593970 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:24.658331 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2v5r4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:35.977778 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 15:26:35.977729454 +0000 UTC m=+313.714397450 I0702 15:26:35.978316 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:35.978335 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 15:26:35.978331213 +0000 UTC m=+313.714999209 I0702 15:26:35.999613 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:35.999699 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 15:26:35.999691877 +0000 UTC m=+313.736359873 I0702 15:26:36.173034 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:36.196292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2ssq7" condition "Approved" to 2026-07-02 15:26:36.19627523 +0000 UTC m=+313.932943226 I0702 15:26:36.215089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2ssq7" condition "Ready" to 2026-07-02 15:26:36.215079824 +0000 UTC m=+313.951747810 I0702 15:26:36.244018 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:36.24400949 +0000 UTC m=+313.980677476 I0702 15:26:36.268939 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:36.269310 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:36.269302822 +0000 UTC m=+314.005970818 I0702 15:26:36.277668 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:36.291082 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:29:36.142860 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:29:36.142904 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 15:29:36.142899488 +0000 UTC m=+493.879567474 I0702 15:29:36.142997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 15:29:36.142988523 +0000 UTC m=+493.879656519 I0702 15:29:36.157933 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:29:36.157992 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 15:29:36.157984829 +0000 UTC m=+493.894652825 I0702 15:29:36.919815 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:29:36.956872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jmqpx" condition "Approved" to 2026-07-02 15:29:36.956855266 +0000 UTC m=+494.693523262 I0702 15:29:36.978004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jmqpx" condition "Ready" to 2026-07-02 15:29:36.97799148 +0000 UTC m=+494.714659466 I0702 15:29:37.006216 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:29:37.006205862 +0000 UTC m=+494.742873858 I0702 15:29:37.029913 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:29:37.030469 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:29:37.030463257 +0000 UTC m=+494.767131243 I0702 15:29:37.039986 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:29:37.049316 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:29:37.049647 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:29:37.049642186 +0000 UTC m=+494.786310162 I0702 15:29:37.050684 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:30:14.324291 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:30:14.324324 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 15:30:14.324317468 +0000 UTC m=+532.060985464 I0702 15:30:14.324557 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 15:30:14.324545571 +0000 UTC m=+532.061213557 I0702 15:30:14.343316 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:30:14.343450 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:30:14.343486 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 15:30:14.34347871 +0000 UTC m=+532.080146716 I0702 15:30:14.659759 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:30:14.668040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k2fcw" condition "Approved" to 2026-07-02 15:30:14.668029977 +0000 UTC m=+532.404697963 I0702 15:30:14.685344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k2fcw" condition "Ready" to 2026-07-02 15:30:14.68533078 +0000 UTC m=+532.421998776 I0702 15:30:14.719853 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:14.71983896 +0000 UTC m=+532.456506946 I0702 15:30:14.744091 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:30:14.745643 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:14.745632765 +0000 UTC m=+532.482300761 I0702 15:30:14.759026 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:30:14.759640 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:14.759631062 +0000 UTC m=+532.496299058